Adding new Updates makes Reports show compliance status as "Enforcement state unknown". Old updates are still installing though.

Hi, Just wondering if anyone has seen this before and resolved it?
Basically, 2012 Software Updates have been working fine for over a year. Last months Patch Tuesday updates were fine too.
However, this week I added a new update to a Software Update Group/deployment. This update did not deploy, and when I run a report, I get "Enforcement state unknown" for ALL clients in the collection. This happens to any deployment I amend. And
also if I create a new update group and new deployment - same thing - "enforcement status unknown".
However, updates previous to this week continue to download and install fine for all deployments. Deployments which I have not changed appear to continue to report correctly (unknown, compliant, pending system restart, etc).
In the SCCM console for Software Updates, the "required" and "installed" figures are still showing correctly.
Custom software packages continue to download and install too.
All servers have sufficient disk space. Most collections dont have maintenance windows, and the deadlines are correct.
Not sure what this could be, a problem with the Management Point? But I can see any errors in the "monitoring" view on the server. The client log files like "wuahandler.log" and "windowsUpdate.log" appear fine also, no obvious
errors.
I cant see any evidence of a group policy conflict. The WSUS entry is still correct in the local group policy (GPEDIT.MSC/admin template/windows comp/ windows update).
Any ideas here? Thanks

There were absolutely no errors in WUAhandler.log on existing machines - all looked normal, which baffled me. Machines with newly installed SCCM client only had machine and user policy update, so could not check for Software Updates.
However, I through web searches, I found a solution on another discussion here:
https://social.technet.microsoft.com/Forums/en-US/1cefa9e0-a7f9-48d1-83b9-34d2293bab64/sccm-2012-r2-problem-with-device-deployment-user-deployments-ok?forum=configmanagerapps
Basically the issue was described as a "corrupt PADBID in the database". A SQL query code detects if the issue is present, and another SQL code fixes the issue.
What lead me to this fix was searching for this error in "CCMEXEC.LOG" online: "System task 'PolicyEvaluator_Unlock' returned error code 0x8000ffff".

Similar Messages

  • Enforcement State Unknown but updates visible on clients?

    Hi all. A strange issue has just appeared in one of our environments with software update deployments. It would appear the report "Enforcement States for a Deployment" is stuck showing clients as "Enforcement State Unknown".
    The clients can see updates no problem at all, so functionally I have no issue. Updates are available and install correctly, but my issue is my deployments are now completely blind in that I have no status updates at all - 4+ days now and the status
    hasn't changed. I can't see any issue on the client side - StateMessage.log indicates it can successfully forward messages.
    Weirdly, this issue only seems to be affecting Software Update Deployments as software distribution reports are updating their statuses as expected.
    I've checked inboxes for blacklogs and can't see anything too out-of-the-ordinary, and I've also tried the "force state refresh" VBS that's doing the rounds on these boards. I've even tried reinstalling the client and recreating the deployments, but all
    these actions have me believe the issue is with my SCCM server only.
    Can anyone help me?
    EDIT - The plot thickens somewhat. The report "Evaluation states for a deployment" has just changed to "Evaluation Succeeded", but  "Enforcement States for a Deployment" remains at "Enforcement State Unknown". HELP!

    I think, you need to take a pause and analyse the log files to verify that everything is gng well.
    The below blog posts would help you in doing that,
    http://blogs.technet.com/b/configurationmgr/archive/2010/11/04/information-on-the-configmgr-2007-client-side-process-for-software-updates.aspx
    http://blogs.technet.com/b/sudheesn/archive/2010/11/10/troubleshooting-sccm-part-iii-software-updates.aspx
    Anoop C Nair -
    @anoopmannur
    MY BLOG:
     http://anoopmannur.wordpress.com
    User Group:
     ConfigMgr Professionals
    This posting is provided AS-IS with no warranties/guarantees and confers no rights.

  • Enforcement State Unknown issue in SCCM 2012 Patch management report.

    Software updates are installed on machine. All updates shown in updates history, but machine not reporting back as Complaint. It showing in Enforcement State Unknown. Please help to resolve the issue.

    Hi,
    Have you tried to "Run Summarization" while right click the software update group?
    If it still shows unknown, please check StateMessage.log on a client that updates show unknown to see whether the state messages have been forwarded successfully.
    Best Regards,
    Joyce Li
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Patch deployment with status "Enforcement state unknown"

    Hi All
    I am pretty new to the patch deployment.
    I generated a report and see there is Last State column with "Enforcement state unknown", not sure if it means failed for those hostnames or will be retried for the installation.
    Kindly clarify.
    Regards
    Ramesh
    Regards Ram

    They will only start to install updates automatically when there is an active update deployment with a scheduled deadline that has past. See for a lot more information:
    http://technet.microsoft.com/en-us/library/gg682168.aspx#BKMK_SUMCompliance
    Also, when Days since last communication is more than 0, that's usually an indication that the client is not communicating any more. That can be caused by a lot of things including something simple as that the device is turned of, or not
    connected with the network.
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • I deleted some podcasts when I synced with itunes on my computer. They no longer show up on the itunes sync when connected, but are still present on my ipod.  How do I delete them from my ipod?

    I deleted some podcasts when I synced with itunes on my computer. They no longer show up on the itunes sync when connected, but are still present on my ipod.  How do I delete them from my ipod?

    Try swiping your finger across the podcast then tap Delete.

  • I have a new computer. I wish to uninstall Lightroom5 and photoshopCC on old computer and re-install on new computer. How do I do this. Also, Lightroom catalog is currently on external drive. Will Lightroom recognize it on new computer

    I have a new computer. I wish to uninstall Lightroom5 and photoshopCC on old computer and re-install on new computer. How do I do this. Also, Lightroom catalog is currently on external drive. Will Lightroom recognize it on new computer

    Hello Francinera,
    please have a first look here: Activation & deactivation help >>> http://helpx.adobe.com/x-productkb/policy-pricing/activation-deactivation-products.html.
    Please come back if necessary.
    Good luck!
    Hans-Günter

  • I'm having trouble setting up my new 5s. it won't connect to phone service and my old phone is still getting all my messages

    i'm having trouble setting up my new 5s. it won't connect to phone service and my old phone is still getting all my messages

    According to http://en.wikipedia.org/wiki/IPhone_5
    the iPhone5 has 1GB of RAM, and internal storage of 16, 32, or 64GB.
    It does not use SD cards.
    Fake iphones are really Android phones using the skin of iOS6.
    Click on the App Store icon. If it takes you to Apple's App Store, then it's a real iPhone.
    But if you are directed to Google Play, then I'm afraid you've gotten a copy.

  • I have a new computer. When I go to bookmarks, none of my old bookmarks are on Firefox. Can I restore them and how can I do this? I am now using Windows 7.

    I have a new computer. When I go to bookmarks, none of my old bookmarks are on Firefox. Can I restore them and how can I do this? I am now using Windows 7. edit

    You will need to do it using a third-party utility such as Phone to PC. Also, see:
    How to dowload purchased music
    Downloading past purchases from the App Store, iBookstore, and iTunes Store

  • When I updated my MAC I lost all my movies from iTunes.  They are still on my hard drive but will not reappear after I reset my preference in advance section.  How do I fix it?

    When I updated my MAC I lost all my movies from iTunes.  They are still on my hard drive but will not reappear after I reset my preference in advance section.  How do I fix it?

    If they are still on your Mac's drive then you should be able to add them back into iTunes via File > Add To Library

  • I set in prefferances plug-ins. Show all filter gallery groups and names, but they are still light gray and not selectable

    I set in preferences plug-ins. Show all filter gallery groups and names, but they are still light gray and not selectable

    They are being shown.  When Photoshop gray out items it means in the documents current state  that item is not supported,  Get the document into a state that the grayed out filters can be used.  Some filters mat not support some modes like CMYK. 32bit color, Lab etc. They seem to be listed but nor currently applicable. Note whem no document is open all are grayed out the when a simple clipboard image is open all are available.

  • E-Quake no longer shows the mag and location at the bottom right corner of my page...Firefowx just updated a week ago to (.).!...I think it still shakes though...

    Question
    E-Quake no longer shows the mag and location at the bottom right corner of my page...Firefox just updated itself a week ago to 9.0.1.... ...I think it still shakes though...

    Question
    E-Quake no longer shows the mag and location at the bottom right corner of my page...Firefox just updated itself a week ago to 9.0.1.... ...I think it still shakes though...

  • DSCC showing instance status as stopped or unknown error

    Hello All,
    Am a newbie and learning DSEE 6.3 at present. Recently SSL renewal happened for all the servers in the production environment and once after that DSCC showing 2 instance as stopped or unknown error. While checking via command prompt everything looks fine, seems to be DSCC having communication issue with specific instance which are on different servers. How you are advising here? Does DSCC restart will help here or particular instance need to unregistered and register again?
    Thanks,
    Yathi

    Hi
    You should un-register your instances from DSCC and register them again so that their certificates are updated in DSCC registry.
    Carole.

  • Get-CacheHost is showing the status of nodes as UNKNOWN and caching service getting crashed - eventlog shows TimeoutException connecting to cache nodes.

    After installing and configuring App fabric 1.1 and ran Get-CacheHost command to check the status of the nodes. Its showing the Status of the nodes as UNKNOWN.  Some time caching service is crashing with Timeout exception and socketException connecting
    to cache nodes. Below is the exception from the even log.  When I see the debug log I could see timeout exceptions connecting to cache nodes. Here is the error in debug log. I appreciate your help on this. Thanks.
    Error in Debug log in event viewer
    Microsoft.Fabric.Common.OperationCompletedException: Operation completed with an exception ---> Microsoft.Fabric.Common.RemoteDownException: Connection rejected by the remote side ---> System.ServiceModel.EndpointNotFoundException: Could not connect
    to net.tcp://xxxxx. yyyyyy:22234/77b087cc000000000000000000000000-31faf87a000000000000000000000000. The connection attempt lasted for a time span of 00:00:00. TCP error code 10061: No connection could be made because the target machine actively refused it
    25.0.198.32:22234.  ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 25.0.198.32:22234
    Error in Event viewer
    AppFabric Caching service crashed with exception {Microsoft.ApplicationServer.Caching.DataCacheException: ErrorCode<ERRService0001>:SubStatus<ES0001>:Service initialization failed. No user action required. ---> Microsoft.Fabric.Common.OperationCompletedException:
    Operation completed with an exception ---> System.TimeoutException: The operation has timed out.
       --- End of inner exception stack trace ---
       at Microsoft.Fabric.Common.OperationContext.End()
       at Microsoft.Fabric.Common.SharedCommunicationObject.EndOpen(IAsyncResult result)
       at Microsoft.Fabric.Federation.FederationSite.EndOpen(IAsyncResult result)
       at Microsoft.Fabric.Data.ReliableServiceManager.EndOpen(IAsyncResult ar)
       at Microsoft.ApplicationServer.Caching.DOMNode..ctor(Int32 id, String displayFriendlyNodeId, Int32 port, EndpointID[] urisDOM, ServiceConfigurationManager configurationManager, ReliableServiceProvider dataStore, ServiceResolverBase& client)
       --- End of inner exception stack trace ---
       at Microsoft.ApplicationServer.Caching.DOMNode..ctor(Int32 id, String displayFriendlyNodeId, Int32 port, EndpointID[] urisDOM, ServiceConfigurationManager configurationManager, ReliableServiceProvider dataStore, ServiceResolverBase& client)

    Seems like a firewall issue, have you set the firewall rule to ALLOW inbound traffic to AppFabric? 

  • Software Updates Deployment Evaluation Cycle Enforcement state unknown

    Hi All,
    I have an issue were I deployed software updates to a collection that have a maintenance window of 5 hours. The next day when I checked the deployments tab it show the updates as 75% compliant with 3 Servers failed to install updates as no further maintenance
    windows were planned.
    I then check the deployments tab 2 days later and it still showed 75% compliant but all the servers were in the unknown Client
    check passed/Active
    Is this because I have no further maintenance windows please advise and if not how can I resolve this thanks 

    You should not use the deployments node in the console to check for software updates compliancy. The reason is because it shows the status of the deployment and not of the installation of the updates. For example if the updates are installed, the deployment
    will show compliant, but when the next re-evaluation of the deployment fails, the deployment will show as failed, while the updates are actually still installed. So always use the reports to check for compliancy.
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • I have the iPhone 5 and have with 6.0.1 software version.  Although I had them when I moved from iPhone 4 to the 5, the latest update has most of my songs on the phone listed in grey (over 95% of them) and I can't play them.  They are still listed though.

    I have the iPhone 5 and have with 6.0.1 software version.  Although I had them when I moved from iPhone 4 to the 5 (could play them), the latest update has most of my songs on the phone listed in grey (over 95% of them) and I can't play them.  They are still listed in the iTunes library.  When I look in the Summary for the iPhone, it shows Audio as only .16 GB - I have over 5 GB of songs, so what gives?
    P.S. When I look at my Playlists most of the songs are greyed out.  However, at the bottom of the list there is a cloud icon with a downward facing arrow.  When I click on it each song starts to "load" and after a few minutes I have the songs back on in the list.  I have to do this to all my playlists (I had over 100) in order to get access to all my songs.  Then I did a sync and it happened again!
    I use iCloud for documents and some other things (calendar, contact, etc.) but am not aware that I have anything music-wise in the cloud.  Any thougnts?

    You may have to try deleting all the music from your phone (by going to Settings>General>Usage>Music, swipping All Music and tapping Delete), then sync it all back on with iTunes in order to fix this.

Maybe you are looking for